Date: Tue, 02 Jan 2024 19:18:23 -0800
From: Sehrope Sarkuni <noreply@github.com>
To: pgsql-jdbc-commits@lists.postgresql.org
Message-ID: <pgjdbc/pgjdbc/push/refs/heads/master/0b0f4c-f24921@github.com>
Subject: [pgjdbc/pgjdbc] eae5e6: feat: Add PasswordUtil and
 PGConnection.alterUserP...
Mime-Version: 1.0
Content-Type: text/plain;
 charset=UTF-8
Content-Transfer-Encoding: 7bit
Approved: 58GruLoMopuc
Archived-At: 
 <https://www.postgresql.org/message-id/pgjdbc/pgjdbc/push/refs/heads/master/0b0f4c-f24921%40github.com>
Precedence: bulk

  Branch: refs/heads/master
  Home:   https://github.com/pgjdbc/pgjdbc
  Commit: eae5e613641be1cb9aba13f454ae5fc63f8ed55a
      https://github.com/pgjdbc/pgjdbc/commit/eae5e613641be1cb9aba13f454ae5fc63f8ed55a
  Author: Sehrope Sarkuni <sehrope@jackdb.com>
  Date:   2024-01-02 (Tue, 02 Jan 2024)

  Changed paths:
    M CHANGELOG.md
    M pgjdbc/src/main/java/org/postgresql/PGConnection.java
    M pgjdbc/src/main/java/org/postgresql/util/MD5Digest.java
    A pgjdbc/src/main/java/org/postgresql/util/PasswordUtil.java
    A pgjdbc/src/test/java/org/postgresql/test/util/PasswordUtilTest.java
    M pgjdbc/src/testFixtures/java/org/postgresql/test/TestUtil.java

  Log Message:
  -----------
  feat: Add PasswordUtil and PGConnection.alterUserPassword(...) for encrypting passwords client side

Add a PasswordUtil helper that provides methods for encoding a given password client
side so that it may be used for ALTER USER and CREATE USER statement without sending
the plaintext password over the wire.

Also adds a helper to PGConnection that generates the ALTER USER command necessary to
update a user's password and executes it.

The helpers default to encoding the password using SCRAM-SHA-256 if used directly or using the
server's default password_encryption setting if used via the PGConnection helper.

Co-authored-by: Sehrope Sarkuni <sehrope@jackdb.com>
Co-authored-by: Dave Cramer <davecramer@gmail.com>


  Commit: f2492112e9ba2f72df417e456742df51533852f0
      https://github.com/pgjdbc/pgjdbc/commit/f2492112e9ba2f72df417e456742df51533852f0
  Author: Sehrope Sarkuni <sehrope@jackdb.com>
  Date:   2024-01-02 (Tue, 02 Jan 2024)

  Changed paths:
    M .github/workflows/matrix.js

  Log Message:
  -----------
  test: Force use of /dev/urandom in CI as source for java.security.egd

Force use of /dev/urandom as the source of entropy for the internal state of the secure
RNG by setting java.security.egd. This is needed to prevent a poorly configured runner
from draining its entropy by using the default of /dev/random. This is not needed on
modern kernels as they do not block after boot. However it may be required for older
kernels that will otherwise refuse to return back random bits unless they think they
have enough tracked entropy in /dev/random. Specifically, this corrects an issue with
one of the hosted CI runners that was hanging fetching bytes from SecureRandom.


Compare: https://github.com/pgjdbc/pgjdbc/compare/0b0f4ce6ed89...f2492112e9ba